Weekly CUI Hotline Q&A: 7.2.26
We’ve been making content about DoD cyber regulations for years. Here’s one of the most common critiques we get: Distinguishing
Weekly CUI Hotline Q&A: 7.2.26 Read Post »
Weekly CUI Hotline Q&A: 6.12.26
Wanna know why the CMMC program persisted despite it’s unpopularity? After almost 2 years and 2,000+ questions on the livestream
Weekly CUI Hotline Q&A: 6.12.26 Read Post »
We Predicted 2026. Here’s What We Got Right (and Wrong) About CMMC
Back in January, we made seven predictions about where the CMMC ecosystem would be by the end of 2026. Now
We Predicted 2026. Here’s What We Got Right (and Wrong) About CMMC Read Post »
Weekly CUI Hotline Q&A: 6.5.26
83 episodes. 2,000+ questions and counting. Our weekly livestream is all about helping defense contractors navigate the intersection of contracts,
Weekly CUI Hotline Q&A: 6.5.26 Read Post »
The Cyber Rule Everyone Forgot About Just Came Back
Remember CIRCIA? The proposed rule would create mandatory cyber incident reporting requirements for more than 300,000 organizations across 16 critical
The Cyber Rule Everyone Forgot About Just Came Back Read Post »
Weekly CUI Hotline Q&A: 05.29.26
Fun fact: we’ve answered 554 questions on the Hotline so far in 2026. It’s easily the most accessible resource for
Weekly CUI Hotline Q&A: 05.29.26 Read Post »
DoD Updated the CMMC FAQs Again
DoD has updated the CMMC FAQs again, and the revision history doesn’t tell the full story. In this episode, we
DoD Updated the CMMC FAQs Again Read Post »
Weekly CUI Hotline Q&A: 5.15.26
From a real DM I recently received: “Our prime customer’s head of purchasing gave a presentation regarding Level 2 certification
Weekly CUI Hotline Q&A: 5.15.26 Read Post »
Lessons Learned from 100 Level 2 Client Certifications
It’s milestone season in the CMMC world. Just six months into the Phased Rollout and there are 2.5x more Level
Lessons Learned from 100 Level 2 Client Certifications Read Post »
CMMC Snake Oil: Vetting Compliance Solutions That Look Real
Bad CMMC solutions are sold in the same ways and places as legitimate ones; you can find bad actors with clean websites and sponsored search results that are also mentioned favorably in AI overviews and online forums. Let’s clear up how to separate reputable sources of information from bad actors selling “solutions” that only lead to more problems.
CMMC Snake Oil: Vetting Compliance Solutions That Look Real Read Post »
CIRCIA: The Controversial Cyber Rule You Already Forgot About
Understand the implications of CIRCIA, the new cyber incident reporting rule, and how it differs from DFARS 7012 for defense
CIRCIA: The Controversial Cyber Rule You Already Forgot About Read Post »
